autofs-5.0.4 - fix double free in expire_proc() From: Ian Kent <raven@themaw.net> In state.c:expire_proc() the function expire_proc_cleanup() is called which frees the parameter structure but automount frees this again in the following line. --- daemon/state.c | 1 - 1 file changed, 1 deletion(-) --- autofs-5.0.1.orig/daemon/state.c +++ autofs-5.0.1/daemon/state.c @@ -298,7 +298,6 @@ static enum expire expire_proc(struct au error(ap->logopt, "expire thread create for %s failed", ap->path); expire_proc_cleanup((void *) ea); - free(ea); return EXP_ERROR; } ap->exp_thread = thid;